christoph/flake-nixinator
1
Fork 0
Code Activity

Flake: Add sops-nix

Browse Source
This commit is contained in:
Christoph Urlacher
2025-07-09 15:12:40 +02:00
parent b0e5de3c57
commit b05b207462
3 changed files with 53 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
flake.lock generated
View File

@ -602,7 +602,28 @@
"nixpkgs": "nixpkgs_2", "nixpkgs": "nixpkgs_2",
"nixvim": "nixvim", "nixvim": "nixvim",
"nps": "nps", "nps": "nps",
"nur": "nur" "nur": "nur",
"sops-nix": "sops-nix"
}
},
"sops-nix": {
"inputs": {
"nixpkgs": [
"nixpkgs"
]
},
"locked": {
"lastModified": 1751606940,
"narHash": "sha256-KrDPXobG7DFKTOteqdSVeL1bMVitDcy7otpVZWDE6MA=",
"owner": "Mic92",
"repo": "sops-nix",
"rev": "3633fc4acf03f43b260244d94c71e9e14a2f6e0d",
"type": "github"
},
"original": {
"owner": "Mic92",
"repo": "sops-nix",
"type": "github"
} }
}, },
"systems": { "systems": {

50
flake.nix
View File

@ -16,10 +16,14 @@
home-manager.url = "github:nix-community/home-manager"; home-manager.url = "github:nix-community/home-manager";
home-manager.inputs.nixpkgs.follows = "nixpkgs"; home-manager.inputs.nixpkgs.follows = "nixpkgs";
# Agenix # Manage secrets with agenix
agenix.url = "github:ryantm/agenix"; agenix.url = "github:ryantm/agenix";
agenix.inputs.nixpkgs.follows = "nixpkgs"; agenix.inputs.nixpkgs.follows = "nixpkgs";
# Manage secrets with sops
sops-nix.url = "github:Mic92/sops-nix";
sops-nix.inputs.nixpkgs.follows = "nixpkgs";
# Nix User Repository (e.g. Firefox addons) # Nix User Repository (e.g. Firefox addons)
nur.url = "github:nix-community/NUR"; nur.url = "github:nix-community/NUR";
nur.inputs.nixpkgs.follows = "nixpkgs"; nur.inputs.nixpkgs.follows = "nixpkgs";
@ -141,6 +145,15 @@
publicKeys.christoph = { publicKeys.christoph = {
ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAoJac+GdGtzblCMA0lBfMdSR6aQ4YyovrNglCFGIny christoph.urlacher@protonmail.com"; ssh = "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJAoJac+GdGtzblCMA0lBfMdSR6aQ4YyovrNglCFGIny christoph.urlacher@protonmail.com";
}; };
# Extra NixOS system modules for all hosts.
# HM modules are passed through home/modules/default.nix instead.
commonModules = [
inputs.agenix.nixosModules.default
inputs.sops-nix.nixosModules.sops
# TODO: inputs.nix-topology.nixosModules.default
];
in { in {
# Local shell for NixFlake directory # Local shell for NixFlake directory
devShells."${system}".default = import ./shell.nix {inherit pkgs;}; devShells."${system}".default = import ./shell.nix {inherit pkgs;};
@ -176,47 +189,36 @@
hostname = "nixinator"; hostname = "nixinator";
username = "christoph"; username = "christoph";
headless = false; headless = false;
extraModules =
# Extra NixOS system modules. []
# HM modules are passed through home/modules/default.nix ++ commonModules;
extraModules = [
# TODO:
# inputs.nix-topology.nixosModules.default
inputs.agenix.nixosModules.default
];
}; };
nixtop = mylib.nixos.mkNixosConfigWithHomeManagerModule { nixtop = mylib.nixos.mkNixosConfigWithHomeManagerModule {
inherit system mylib publicKeys; inherit system mylib publicKeys;
hostname = "nixtop"; hostname = "nixtop";
username = "christoph"; username = "christoph";
headless = false; headless = false;
extraModules = [ extraModules =
# TODO: []
# inputs.nix-topology.nixosModules.default ++ commonModules;
inputs.agenix.nixosModules.default
];
}; };
servenix = mylib.nixos.mkNixosConfigWithHomeManagerModule { servenix = mylib.nixos.mkNixosConfigWithHomeManagerModule {
inherit system mylib publicKeys; inherit system mylib publicKeys;
hostname = "servenix"; hostname = "servenix";
username = "christoph"; username = "christoph";
headless = true; headless = true;
extraModules = [ extraModules =
# TODO: []
# inputs.nix-topology.nixosModules.default ++ commonModules;
inputs.agenix.nixosModules.default
];
}; };
thinknix = mylib.nixos.mkNixosConfigWithHomeManagerModule { thinknix = mylib.nixos.mkNixosConfigWithHomeManagerModule {
inherit system mylib publicKeys; inherit system mylib publicKeys;
hostname = "thinknix"; hostname = "thinknix";
username = "christoph"; username = "christoph";
headless = true; headless = true;
extraModules = [ extraModules =
# TODO: []
# inputs.nix-topology.nixosModules.default ++ commonModules;
inputs.agenix.nixosModules.default
];
}; };
# These configurations don't include HM. # These configurations don't include HM.

12
system/default.nix
View File

@ -271,13 +271,11 @@ with mylib.networking; {
neovim.enable = true; neovim.enable = true;
nix-ld.enable = true; # Load dynamically linked executables nix-ld.enable = true; # Load dynamically linked executables
gnupg = { gnupg.agent = {
agent = { enable = true;
enable = true; enableBrowserSocket = true;
enableBrowserSocket = true; enableExtraSocket = true;
enableExtraSocket = true; enableSSHSupport = true;
enableSSHSupport = true;
};
}; };
hyprland = { hyprland = {